Privacy Library

Federal Laws and Regulations

Federal Laws and Regulations

Children’s Privacy

Electronic Communications

Communications Assistance for Law Enforcement Act

47 USC §§ 1001 - 1021

CALEA Regulations

47 C.F.R. §§ 1.20000 to 1.20008

Telecommunications Act of 1996: Customer Proprietary Network Information (CPNI) provisions

See 47 § USC 222

Telephone Consumer Protection Act of 1991

See 47 USC § 227

Electronic Communications Privacy Act
Title I
Title II
Title III
CAN-SPAM Act of 2003

Codified at 15 U.S.C. §§ 7701 – 7713

CAN-SPAM Act FTC Regulations
16 C.F.R. §§ 316.1 to 316.6
CAN-SPAM Act FCC Regulations
47 C.F.R. § 64.3100

Financial Privacy

Customer Identification Programs for Banks, Savings Associations, Credit Unions and Certain Non-Federally Regulated Banks
Interagency Guidance on Authentication in an Internet Banking Environment
FFIEC 2005 Guidance
FFIEC 2011 Supplement
FAQs
Federal Reserve Board Regulations
Fair Credit Reporting Act
Fair and Accurate Credit Transactions Act
Affiliate Marketing Rule - CFPB
Model Affiliate Marketing Notices - CFPB
Furnisher Rules - CFPB
Furnisher Guidelines - CFPB
Model Negative Information Notice - CFPB
Prescreen Notice Rule - CFPB
Model Prescreen Notices - CFPB
Risk-Based Pricing Rule - CFPB
Model Risk-Based Pricing Notices - CFPB
California SB1 Preemption Decision (ABA v. Lockyer)
Gramm-Leach-Bliley Act (GLBA)
Regulation P - CFPB
Privacy - FTC
Regulation S-P - SEC
Privacy - CFTC
Interagency Guidelines Establishing Standards for Safeguarding Customer Information and Rescission of Year 2000 Standards for Safety and Soundness
Proper Disposal of Consumer Information Under the Fair and Accurate Credit Transactions Act of 2003
Standards for Safeguarding Customer Information

GLBA Information Security

Government

Health Information

Health Insurance Portability and Accountability Act of 1996 (HIPAA)
Pub. L. 104-191, 110 Stat. 1936 (1996)
Health Information Technology for Economic and Clinical Health Act (HITECH Act)
Pub. L. 111-5, 123 Stat. 115 (2009)
HIPAA Enforcement Rules
45 C.F.R. pt. 160, subpt. A – General Provisions
45 C.F.R. pt. 160, subpt. B – Preemption of State Law
45 C.F.R. pt. 160, subpt. C – Compliance and Investigations
45 C.F.R. pt. 160, subpt. D – Imposition of Civil Money Penalties
45 C.F.R. pt. 160, subpt. E – Procedures for Hearings
HIPAA Security, Breach Notification, and Privacy Rules
45 C.F.R. pt. 164, subpt. A – General Provisions
45 C.F.R. pt. 164, subpt. C – Security Standards
45 C.F.R. pt. 164, subpt. D – Breach Notification
45 C.F.R. pt. 164, subpt. E – Privacy
HIPAA Guidance
HHS-OCR Privacy Rule
HHS-OCR Security Rule
HHS-OCR Breach Notification Rule
HHS-OCR Guidance on HIPAA, COVID-19 Vaccination, and the Workplace
HHS-OCR Guidance of HIPAA & Cloud Computing
HHS-OCR Guidance on Risk Analysis Requirements under the HIPAA Security Rule
HHS-OCR HIPAA Cyber Security Guidance Materials
HHS-OCR Fact Sheet: Ransomware & HIPAA

Other